CVE-2025-52625CWE-525

CVE-2025-52625

Low · published October 10, 2025

CVSS v3.1
3.7
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

A vulnerability

Cacheable SSL Page Found vulnerability has been identified

in HCL AION.

Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser

This issue affects AION: 2.0.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-525 · Use of Web Browser Cache Containing Sensitive Information
Published
2025-10-10T15:15Z
Affected products (1)
ProductVersionsFixed in
hcltech/aionall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444 · [email protected]
EPSS history
Timeline
  • 10 OCT 10:28Z
    HCL AION is susceptible to Cacheable SSL Page Found vulnerability
    cvelistv5